Russian cyber research companies post alerts about infostealer, industrial threats

Russian cybersecurity firms report a “large-scale” campaign using Nova, a commercial stealer (forked from SnakeLogger) sold on dark marketplaces and distributed via phishing archives targeting organizations that handle many emails; Nova harvests credentials, keystrokes, screenshots and clipboard data. Local researchers also attribute recent cyberespionage and industrial intrusions to state-linked groups (Rezet/Rare Wolf and APT NGC4020), noting exploitation of remote-control software and compromises of multiple major Russian organizations, though independent verification is limited.